Insights

On 27 July 2026, the European Commission published its guidance on the Cyber Resilience Act (Regulation (EU) 2024/2847). Most CRA obligations don't come into force until December 2027, but the reporting duties start much sooner, and they cover products with digital elements already on the market today, not just future launches. September 11th 2026 From September 11th 2026, manufacturers must report to ENISA (European Union Agency for Cybersecurity) and the coordinating CSIRT

ESRB Warning ESRB/2026/3: What It Means for Fund and Asset Management Clients in Luxembourg, Ireland, DIFC and ADGM On 7 July 2026, the European Systemic Risk Board (ESRB) published Warning ESRB/2026/3, formally upgrading its classification of cyber risk arising from frontier AI models (“FAIMs”) from “elevated” to “severe”. The Warning is addressed to EU supervisory authorities and directly targets “significant institutions” under ECB supervision, but its consequences reach f

La lutte contre le blanchiment et le financement du terrorisme pour les Professionnels de la Comptabilité et Activité de Conseil Fiscal

While the world is busy trying to predict the impact that the current Iran conflict will have on trade, oil price and economy downturn, there is a less talked about risk that companies need to be aware of: the use of cyber operations as an asymmetric response channel during geopolitical escalation. In its 2 March 2026 alert, the UK’s NCSC said there is “almost certainly” a heightened indirect cyber threat for organisations, especially in terms of credential theft, exploitati

La lutte contre le blanchiment et le financement du terrorisme pour les Professionnels de la Comptabilité et Activité de Conseil Fiscal

As Europe steps into a new era of digital asset regulation, the Markets in Crypto-Assets (MiCA) framework has become the cornerstone of legal certainty for Crypto Asset Service Providers (CASPs). For companies operating in, or entering, the crypto asset ecosystem, understanding what a CASP is and what MiCA compliance entails remains essential for both regulatory alignment and business growth. Understanding CASP under MiCA A Crypto-Asset Service Provider (CASP) is any company

How to ensure compliance and turn it into a competitive advantage The Digital Operational Resilience Act (DORA) is redefining how financial institutions manage digital and operational risk across the EU. What began as a regulatory mandate has now evolved into a continuous resilience journey, and for those prepared, a strategic advantage. Understanding DORA: The Shift from Compliance to Continuous Resilience The Digital Operational Resilience Act (DORA) is one of the mos

Luxembourg, 28 October 2025 — MAQIT S.A. , Luxembourg’s leading RegTech and advisory firm, marked its 10th anniversary in style with a spectacular celebration that brought together clients, partners, industry leaders, and friends from across Luxembourg’s vibrant financial and technology communities. Held at Um Plateau in Luxembourg City, the event was a true reflection of MAQIT’s spirit — dynamic, innovative, and forward-looking . Guests enjoyed inspiring speeches, heartfel

Cybersecurity is no longer limited to data protection or intrusion prevention: it is becoming a strategic lever in AML/CFT.

Planning to apply for a CASP license in the EU and wondering what regulators are looking for?